CVE-2022-25881
HighAdvisory
Published 31 Jan 2023In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.016
- 75th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 353
- of 17,787 indexed, latest versions
- Container images
- 351
- deployed by those charts
- Fix available
- 1 of 1
- affected package
http-cache-semantics vulnerable to Regular Expression Denial of Service
Carried by container images the latest versions of 353 of 17,787 indexed charts deploy, on 351 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| http-cache-semanticsnpm | 3.7.3, 3.8.0, 3.8.1, 4.0.3+1 more | 4.1.1 | 351 |
- OSV records
- GHSA-rc47-6667-2j5j
Charts affected
353 by stars
Container images carrying it
351 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 6fde1edc0983 | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | 0cf25ed621e2 | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | 0635f17c9d2c | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | e34964e336c1 | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | 0c5a3398d1e4 | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | 8ba040e79ca0 | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | e9716966f30b | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | a8d40779eeae | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | 38a4f32fad82 | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | eab9bd0b6986 | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | 96f8c08c0c1b | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | 6047599cd78e | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | 2ee057ad3bef | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | 639c980be0f1 | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | e1017d0dbd78 | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | 827aa2f2389d | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | ee0354b7a57a | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | 451706815103 | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | 58d377933678 | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | 763daf9caf8e | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | 6b18e6d0eda4 | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | 87120a4561a9 | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | 53772b7b42c7 | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | 96683c54ae65 | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | 33f7976b26a8 | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | 542e91e8499c | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | 491bb243f555 | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | ff2af53897e7 | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | 254d16af8f71 | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | 6197516c9d7b | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | 60fa8875aff8 | http-cache-semantics | 4.1.1 | 1 |
| ghcr.io/ | ab8e2f583e56 | http-cache-semantics | 4.1.1 | 1 |
| quay.io/ | 10df27bc5560 | http-cache-semantics | 4.1.1 | 1 |
| quay.io/ | ce6938ff6709 | http-cache-semantics | 4.1.1 | 1 |
| quay.io/ | 65694109877e | http-cache-semantics | 4.1.1 | 1 |
| quay.io/ | 7a4b9fedc724 | http-cache-semantics | 4.1.1 | 1 |
| quay.io/ | 01c3b7acb301 | http-cache-semantics | 4.1.1 | 1 |
| quay.io/ | 041df93e2bac | http-cache-semantics | 4.1.1 | 1 |
| quay.io/ | 99ccdfd543e1 | http-cache-semantics | 4.1.1 | 1 |
| quay.io/ | becd3e39360a | http-cache-semantics | 4.1.1 | 1 |
| quay.io/ | 5d90b9c193e0 | http-cache-semantics | 4.1.1 | 1 |
| quay.io/ | 3207f957e80c | http-cache-semantics | 4.1.1 | 1 |
| quay.io/ | 4b188259267e | http-cache-semantics | 4.1.1 | 1 |
| quay.io/ | cad83090c58f | http-cache-semantics | 4.1.1 | 1 |
| quay.io/ | 6ba82beff18e | http-cache-semantics | 4.1.1 | 1 |
| quay.io/ | 4cd9ea9434c4 | http-cache-semantics | 4.1.1 | 1 |
| quay.io/ | 399d2e6b10ef | http-cache-semantics | 4.1.1 | 1 |
| quay.io/ | c973e166a5dc | http-cache-semantics | 4.1.1 | 1 |
| quay.io/ | cb17600883a3 | http-cache-semantics | 4.1.1 | 1 |
| registry.gitlab.com/ | fda21b0a0344 | http-cache-semantics | 4.1.1 | 1 |